Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

lint the API through https://apisecurity.io/ #26

Open
BenGardiner opened this issue Feb 20, 2019 · 4 comments
Open

lint the API through https://apisecurity.io/ #26

BenGardiner opened this issue Feb 20, 2019 · 4 comments

Comments

@BenGardiner
Copy link
Member

convert apiary.apib to swagger / Open API 2.0 and run that through the security checks at https://apisecurity.io/

@BenGardiner BenGardiner added this to the Later milestone Feb 28, 2019
@BenGardiner BenGardiner removed this from the Later milestone May 10, 2019
@BenGardiner BenGardiner added this to the rc-1.0 milestone May 27, 2019
@BenGardiner
Copy link
Member Author

No Security issues found (only structure issues due to conversion -- these are apimatic bugs).

image

@BenGardiner
Copy link
Member Author

BenGardiner commented Jun 5, 2019

apimatic staff patched the swagger export file. They will have fixed the export to swagger by next week. apisecurity was choking on the structure errors and hiding a multitude of warnings and errors as a result. We won't be able to fix all of these because many are the result of limitations in API Blueprint or conversion errors in apimatic. I'll triage and create issues.

image

@BenGardiner BenGardiner reopened this Jun 5, 2019
@BenGardiner
Copy link
Member Author

the relevant excerpt from apisecurity.io assessment JSON

apisecurity_assessment_excerpt.txt

@BenGardiner BenGardiner added the blocked waiting for something else to finish before this is ready to tackle label Jun 10, 2019
@BenGardiner
Copy link
Member Author

apimatic has fixed the export issue now

@BenGardiner BenGardiner removed the blocked waiting for something else to finish before this is ready to tackle label Jun 11, 2019
@BenGardiner BenGardiner removed this from the rc-1.0 milestone Jul 2, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant